How the selected controls will prevent or deter such events

Assignment Help Other Subject

Reference no: EM133286756

Question - CSIA Cyber Security Discussion

Question Description - As part of its due diligence efforts, the M&A team has determined that the following events contributed substantially to the bankruptcy of Island Banking services.

1. Company officers and managers were able to conduct criminal activities using company IT assets without detection.

2. The company did not have a disaster recovery / business continuity plan in place. It could not restart operations due to the loss of servers and workstations (seized by law enforcement agents).

3. Storage media for servers and workstations had not been backed up to an off premises location leaving the company with no way to recover from the law enforcement seizure of storage media as evidence.

The root cause for each event listed above was determined to be: ineffective and/or missing IT security controls.

You have been asked to perform a gap analysis to assist in the identification and selection of IT security controls which could be implemented to remediate the situation ("close the gaps"). The CCISO has requested that you use the NIST Cybersecurity Framework and the NIST Security and Privacy Controls Catalog (NIST SP 800-53) as your source for IT security controls.

Choose 3 to 5 families or categories of controls ("framework functions") which should be implemented to remediate the above deficiencies (at least one family, e.g. AU Audit and Accountability, or category, e.g. Recovery Planning, for each event). Describe how the selected controls will prevent or deter such events in the future ("close the gaps").

Format your response as a business memorandum. For each control family or category, you should provide the following information (see Domain 2 Section 1.1.2 in CCISO):

What it is

What it does

How the control performs its objective.

Reference no: EM133286756

Questions Cloud

Write a reflective report on internship : FLPL28263 Office Administration - Sheridan College Write a reflective report on internship - Describe and comment on your position or role within the company

What should you have done differently : Dysfunctional Group Project Discussion - What should you have done differently? What skills can you improve so you can be an effective team member

What if any factors thwarted efforts to rectify the problem : What, if any factors thwarted efforts to rectify the problem. What attempts have been made through history to remedy the problem

How do the findings of the hawthorne studies : How do the findings of the Hawthorne studies and the Banking Room Studies explain the power of an organizations culture

How the selected controls will prevent or deter such events : CSIA Cyber Security Discussion - Describe how the selected controls will prevent or deter such events in the future ("close the gaps")

How can you as a nursing student engage : Nursing Core Competencies Discussion - How can you as a nursing student engage in these core competencies

Compare mothers and fathers socialization strategies : Compare mothers' and fathers' socialization strategies with this section's description of reciprocal socialization. What are your thoughts on their strategies

What is meant by conservation of energy : Define isotope and ion. What is the difference between an isotope of an element and an ion of an element? What is meant by conservation of energy

Why should management be cautious about the union proposal : Assume that labor and management are negotiating a labor agreement. Why should management be cautious about the union proposal

User Account

All Pages